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Amendments to the Claims 
Listing of Claims: 
1-31. (canceled) 

32. (new) A method of comparing a data key to a rule, wherein the data key and rule are 
representable by bits, the method including: 

generating a mask that indicates relevant bits that are relevant to identify the rule and 
do not care bits that are extraneous for identifying the rule; 

generating a vector comprised of memory positions and at least a corresponding bit for 
each of the memory positions, by setting bits for those memory positions of the vector pointed 
to by bits of the rule when read as an address, the address including both relevant bits and do 
not care bits, to a value that indicates that the rule is detected; 

inserting values of the bits of the vector into memory positions of a memory 
corresponding to the memory positions for each bit of the vector; 

dividing the bits of the data key into a plurality of chunks; 

extracting data from the memory at an address corresponding to the value of each of at 
least some of the chunks; and 

examining the data extracted from each memory address corresponding to the at least 
some of the chunks to determine if the rule is obeyed for the entire data key. 

33. (new) The method of claim 32, wherein the step of generating a vector comprises 
automatically setting the value of the con-esponding bits of the vector to indicate that the rule 
is detected according to the following function: 

Rule[I][C bits] AND Mask[I][C bits] is equal to Mask[C bits] AND J, 
wherein I is the Ith rule, C is the number of bits in a chunk, and J ranges from 0 to 2*^ -1. 

34. (new) The method of claim 33, wherein the step of generating a mask generates a string 
of bits corresponding to the number of bits in a rule, and sets each bit in the mask that 
corresponds to a bit in the rule that is relevant for identifying that rule. 

35. (new) The method according to claim 32, wherein the step of generating a vector 
comprises setting the value of bits corresponding to a number of bits comprising a chunk. 
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36. (new) The method according to claim 32, further comprising the step of configuring the 
memory into a two dimensional memory structure, a first dimension corresponding to the 
chunks of the data key and a second dimension corresponding to different rules. 

37. (new) The method according to claim 32, wherein examining the data further comprises 
performing at least one AND operation on the data extracted from the memory corresponding 
to each of the chunks of the data key to determine if the rule is obeyed for the entire data key. 

38. (new) The method according to claim 32, further comprising the step of providing the 
memory as separate memory devices and allocating sub sets of the different memory devices 
based on the number of rules to be detected. 

39. (new) The method according to claim 32, wherein a number of rules are detected, further 
comprising the step of prioritizing the rules according to a predetermined order of priority for 
rules. 

40. (new) The method according to claim 32, further comprising the step of parsing for 
parsing a packet received over a network into a data key. 

41. (new) The method according to claim 40, further comprising the step of receiving the 
packet from an Internet based network. 

42. (new) A system for comparing a data key to a rale, wherein the data key and rale are 
representable by bits, the system including: 

a memory comprised of memory positions and at least a corresponding bit for each of 
the memory positions making up a vector, wherein bits for those memory positions of the 
vector pointed to by bits of the rule when read as an address, the address including both 
relevant bits and do not care bits, are set to a value that indicates that the rule is detected; 

an interface that divides the bits of the data key into a plurality of chunks; 

a comparator that compares data from each memory address corresponding to the at 
least some of the chunks to determine if the rule is obeyed for the entire data key. 
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43. (new) The system of claim 42, wherein the memory is populated with the 

by setting the value of the corresponding bits of the vector stored in memory to indicate that 
the rule is detected according to the following function: 

Rule[I][C bits] AND Mask[I][C bits] is equal to Mask[C bits] AND J, 
wherein I is the Ith rule, C is the number of bits in a chunk, and J ranges from 0 to 2^ -1, 
and wherein Mask are bits set to a value indicating relevant bits that are relevant to identify 
the rule and do not care bits that are extraneous for identifying the rule. 

44. (new) The system of claim 43, further comprising a mask formed of a string of bits 
corresponding to the number of bits in a rule, and sets each bit in the mask that corresponds to 
a bit in the rule that is relevant for identifying that rule. 

45. (new) The system according to claim 42, wherein the memory stores the value of bits of 
the vector corresponding to a number of bits comprising a chunk. 

46. (new) The system according to claim 42, wherein the memory is configured into a two 
dimensional memory structure, a first dimension corresponding to the chunks of the data key 
and a second dimension corresponding to different rules. 

47. (new) The system according to claim 42, wherein the comparator includes at least one 
AND device that operates on data extracted from the memory corresponding to each of the 
chunks of the data key to determine if the rule is obeyed for the entire data key. 

48. (new) The system according lo claim 42, wherein the memory is provided as separate 
memory devices and further comprising a switch that allocates the which memory devices are 
grouped together based on the number of rules to be detected. 

49. (new) The system according to claim 42, wherein a number of rules are detected, further 
comprising a prioritzer that prioritizes rules according to a predetermined order of priority for 
rules. 

50. (new) The system according to claim 42, further comprising a parser for parsing a packet 
received over a network into a data key. 
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5 1 . (new) The system according to claim 50, wherein the parser receives the packet from an 
Internet based network. 

52. (new) The system of claim 42, wherein the memory includes only a number of individual 
memory units (per bit) according to the formula: 

NM/(2^L^C), 

Wherein, N is the number of bits in the data key, M is the number of rules available for 
detection, C is the number of bits in a chunk and L is the width of a discrete memory device. 
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